Injection issues such as SQL, NoSQL, or LDAP occur when untrusted data is sent to an interpreter as part of a command or query.
Hostile data sent by the attacker can trick the interpreter into executing malicious commands or accessing unauthorized data.
OWASP Top 10 Application Security Risks - 2017 | Reference |
---|---|
A1:2017-Injection | OWASP |
Injection issues occur due to improper separation between control flow and data flow.Francesco Ongaro